Changed the non-standard return code 419 to simply forbidden